What is CCPA?
In force since January 1, 2020, the California Consumer Privacy Act (CCPA) is currently the most comprehensive privacy legislation in the United States. It shares many similarities with the European Union’s General Data Protection Regulation, better known as GDPR.
CCPA grants California consumers with new privacy rights regarding the collection of their personal information: the right to know what personal information is collected, used, shared or sold by businesses; the right to delete personal information held by businesses; the right to opt-out of the sale of their personal information, and the right to non-discrimination in terms of price and/or service when a consumer exercises a privacy right under CCPA.
Who does CCPA apply to?
The law applies to for-profit businesses if one or more of the following are true: (i) the business has an annual gross revenue of $25 million, (ii) derive 50 percent or more of its annual revenues from selling consumers’ personal information, or (iii) annually buy, sell, receive, or share for commercial purposes the personal information of 50,000 or more consumers, households, or devices.
Rules that companies/entities must adhere to
Businesses subject to CCPA must provide notice to consumers at or before data collection; create procedures to respond to requests from consumers to opt-out; know and delete personal information, as well as verify the identity of consumers who make requests to know and to delete—whether the consumer maintains a password-protected account with the business or not.1
What is “Personal Information” under CCPA?
According to CCPA, personal information refers to “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household”. Additionally, specifically excluded from the definition of personal information is any information publicly available, i.e.any information that is lawfully made available from federal, state, or local government records.
How does Bynder comply with the CCPA?
Bynder’s compliance with CCPA is an ongoing process that has been implemented with particular attention and strict thoroughness, as well as utmost rigor. In order to comply with CCPA, we are updating our Global Privacy Policy on a regular basis to clarify what personal information is collected, including how and why it is collected and processed, and how individuals can request access, disclosure or deletion of their personal information under Bynder’s protection.
Additionally, Bynder has implemented verification mechanisms to check the identity of individuals who make requests related to personal information, aiming to guaranteeindividuals the maximum security of their personal information.
1 California Department of Justice. CCPA Sheet Fact. Available here. Accessed on 10 January 2020.
Please note that this page simply provides background information to help you understand how Bynder addresses some legal points regarding CCPA and is not legal advice.